Saturday, January 4, 2025
HomeComputer SecurityRussian Hacker Pleads Guilty For Using Neverquest Malware to Steal Money from...

Russian Hacker Pleads Guilty For Using Neverquest Malware to Steal Money from Victims’ Bank Accounts WorldWide

Published on

SIEM as a Service

A Russian citizen LISOV, 33, pleaded guilty for using NeverQuest malware to infect victim computers to steal their banking login information and to steal money from their banking accounts.

The NeverQuest banking malware spreads through social media, email and file transfer protocols. It is capable of exfiltrating login information form number of banking and financial sites.

With the malware attackers stolen millions of dollars from victim’s accounts, once the malware gets installed in the system then is able to identify the victim’s login attempts to banking services and exfiltrate the credentials.

- Advertisement - SIEM as a Service

NeverQuest also enables the attackers to gain remote control over the victim machines and let’s login with victim bank accounts to complete the transactions.

“As he admitted today, Stanislav Vitaliyevich Lisov used malware to infect victims’ computers, obtain their login credentials for online banking accounts, and steal money out of their accounts,” U.S. Attorney Geoffrey S. Berman said.

“This type of cybercrime extends across borders, poses a malicious threat to personal privacy, and causes widespread financial harm.”

According to DoJ press release, between June 2012 and January 2015, LISOV was responsible for key aspects of the creation and administration of a network of victim computers that were infected with NeverQuest.

LISOV also personally harvested the user login credentials with the malware and traded the login information and personally identifiable information of victims.

He pleaded guilty in the conspiracy to commit computer hacking, where he will get maximum fu=ive years of prison and his sentencing is scheduled for June 27, 2019, at 11:00 a.m. before Judge Caproni.

Related Read

Authorities Shut Down the Largest Underground Market Place for Buying and Selling the Hacked Servers

Dozens of U.S .gov Websites Vulnerable to MITM Attack – TLS certificates Not Renewed due to Federal Shutdown

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome...

ASUS Critical Vulnerabilities Let Attackers Execute Arbitrary Commands

In a recent security advisory, ASUS has alerted users to critical vulnerabilities affecting several...

NTT Docomo Hit by DDoS Attack, Services Disrupted for 11 Hours

NTT Docomo, one of Japan’s leading telecommunications and IT service providers, experienced a massive...

Apple Agrees to $95M Settlement Over Siri Privacy Lawsuit

Apple Inc. has agreed to pay $95 million to settle a proposed class-action lawsuit...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome...

ASUS Critical Vulnerabilities Let Attackers Execute Arbitrary Commands

In a recent security advisory, ASUS has alerted users to critical vulnerabilities affecting several...

NTT Docomo Hit by DDoS Attack, Services Disrupted for 11 Hours

NTT Docomo, one of Japan’s leading telecommunications and IT service providers, experienced a massive...